Lucene search
Redhat.comRH:CVE-2020-7238HistoryMay 14, 2022 - 11:41 a.m.
CVE-2020-7238
2022-05-1411:41:00
redhat.com
access.redhat.com
25
0.012 Low
EPSS
Percentile
85.6%
A flaw was found in Netty, where it mishandles Transfer-Encoding whitespace. This flaw allows HTTP Request Smuggling.
Mitigation
-
Use HTTP/2 instead (clear boundaries between requests)
-
Disable reuse of backend connections eg.
http-reuse never
in HAProxy or whatever equivalent LB settings
Related
ubuntucve
ubuntucve
CVE-2020-7238
2020-01-27 00:00:00
CVE-2019-16869
2019-09-26 00:00:00
f5
f5
K75555129 : Netty vulnerabilities CVE-2019-16869 and CVE-2020-7238
2020-07-13 00:00:00
debiancve
debiancve
CVE-2020-7238
2020-01-27 17:15:12
CVE-2019-16869
2019-09-26 16:15:11
cvelist
cvelist
CVE-2020-7238
2020-01-27 16:43:44
CVE-2019-16869
2019-09-26 15:28:25
nvd
nvd
CVE-2020-7238
2020-01-27 17:15:12
CVE-2019-16869
2019-09-26 16:15:11
cve
cve
CVE-2020-7238
2020-01-27 17:15:12
CVE-2019-16869
2019-09-26 16:15:11
veracode
veracode
HTTP Request Smuggling
2020-01-31 00:35:33
HTTP Request Smuggling
2019-09-27 08:45:44
github
github
HTTP Request Smuggling in Netty
2020-02-21 18:55:50
HTTP Request Smuggling in Netty
2019-10-11 18:41:23
prion
prion
Design/Logic Flaw
2020-01-27 17:15:00
Design/Logic Flaw
2019-09-26 16:15:00
osv
osv
HTTP Request Smuggling in Netty
2020-02-21 18:55:50
CVE-2020-7238
2020-01-27 17:15:12
netty-3.9 vulnerabilities
2020-10-22 18:26:07
nessus
nessus
Ubuntu 16.04 LTS : Netty vulnerabilities (USN-4600-1)
2020-10-22 00:00:00
Debian DSA-4597-1 : netty - security update
2020-01-06 00:00:00
Debian DLA-1941-1 : netty security update
2019-10-01 00:00:00
ubuntu
ubuntu
Netty vulnerabilities
2020-10-22 00:00:00
Netty vulnerabilities
2020-10-27 00:00:00
Netty vulnerabilities
2020-09-22 00:00:00
ibm
ibm
openvas
openvas
Ubuntu: Security Advisory (USN-4600-1)
2020-10-23 00:00:00
Debian: Security Advisory (DLA-1941-1)
2019-10-01 00:00:00
Debian: Security Advisory (DLA-2364-1)
2020-09-05 00:00:00
debian
debian
[SECURITY] [DSA 4597-1] netty security update
2020-01-03 14:58:28
[SECURITY] [DSA 4597-1] netty security update
2020-01-03 14:58:28
[SECURITY] [DLA 1941-1] netty security update
2019-09-30 21:18:13
redhatcve
redhatcve
redhat
redhat
(RHSA-2020:0567) Important: Red Hat build of Eclipse Vert.x 3.8.5 security update
2020-03-03 16:07:01
(RHSA-2020:0601) Important: AMQ Clients 2.6.0 Release
2020-02-25 15:01:50
fedora
fedora
[SECURITY] Fedora 33 Update: netty-4.1.51-1.fc33
2020-09-25 17:16:37
[SECURITY] Fedora 33 Update: jctools-3.1.0-1.fc33
2020-09-25 17:16:36
freebsd
freebsd
cassandra3 -- multiple vulnerabilities
2023-01-11 00:00:00